Welcome to ISAserver.org

RE: Firewall Client and Proxy Config confusion!

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Firewall Client >> RE: Firewall Client and Proxy Config confusion!

Page: << < prev 1 [2]

Message

<< Older Topic Newer Topic >>

RE: Firewall Client and Proxy Config confusion! - 7.Dec.2005 8:18:06 PM

jmercer54

Posts: 85
Joined: 25.Oct.2004
From: NY
Status: offline

Forget that last observation about the nics... it's fine. Refresh causes it to pass through and get a new page; simply using favorites to go to the site causes the kind of performance difference I was looking for. :)

That leaves my anonymous issue and why the autodetect isn't working on the fwclient...

(in reply to jmercer54)

Post #: 21

Featured Links*

RE: Firewall Client and Proxy Config confusion! - 7.Dec.2005 8:44:11 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi jmercer54,

check out http://www.isaserver.org/articles/ISA2004_ClientAutoConfig.html .

HTH,
Stefaan

(in reply to jmercer54)

Post #: 22

RE: Firewall Client and Proxy Config confusion! - 7.Dec.2005 9:13:20 PM

jmercer54

Posts: 85
Joined: 25.Oct.2004
From: NY
Status: offline

quote:

ORIGINAL: spouseele

Hi jmercer54,

check out http://www.isaserver.org/articles/ISA2004_ClientAutoConfig.html .

HTH,
Stefaan

Thanks, Stefaan. Great article! That clears up a lot of confusion for me, and I think I'm down to only one problem. No matter what I do, I can't get the fwclient to automatically detect the ISA server...

(in reply to spouseele)

Post #: 23

RE: Firewall Client and Proxy Config confusion! - 7.Dec.2005 9:25:31 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi jmercer54,

to test the autodetect mechanisms, use the Firewall Client Tool for ISA Server 2004 ( http://www.microsoft.com/downloads/details.aspx?familyid=f20f6267-273d-4870-b1e8-799b261b4786&displaylang=en ).

HTH,
Stefaan

(in reply to jmercer54)

Post #: 24

RE: Firewall Client and Proxy Config confusion! - 8.Dec.2005 1:05:47 AM

jmercer54

Posts: 85
Joined: 25.Oct.2004
From: NY
Status: offline

Well - thanks to the tool, I could see that DHCP simply wasn't working. I double-checked the settings and they're (according to the example) correct... after trying several times to get it to work, I simply added the wpad entry into DNS. The tool (and fw client) now confirm that wpad is available via the DNS entry - that's the good news. The "bad news" is that the DHCP wpad version still won't retrieve - but at least everything's working again.

Thanks for all your help, both of you!

(in reply to spouseele)

Post #: 25

RE: Firewall Client and Proxy Config confusion! - 8.Dec.2005 2:00:29 AM

LLigetfa

Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline

Did you take care to make the DHCP entry entirely in lowercase?

_____________________________

The School of Hard Knocks is a mean teacher. She gives the exam before the lesson.

(in reply to jmercer54)

Post #: 26

RE: Firewall Client and Proxy Config confusion! - 8.Dec.2005 2:45:01 PM

jmercer54

Posts: 85
Joined: 25.Oct.2004
From: NY
Status: offline

Actually - no. The example shows a capital W; I'll redo the entire thing in lc and we'll see what happens. Thanks for the tip! :)

(in reply to LLigetfa)

Post #: 27

RE: Firewall Client and Proxy Config confusion! - 8.Dec.2005 3:54:08 PM

jmercer54

Posts: 85
Joined: 25.Oct.2004
From: NY
Status: offline

Well, no matter what I do - lowercase all, uppercase all, fqdn for the isa server, just the server name, etc... the fwctool shows the following:

Timeout is set to 60 seconds
Locating WSPAD URL in DHCP Server
Locating option 252 in DHCP
Reading network adapters information
DHCP option for WPAD not found
WSPAD URL was not found in DHCP Server

And then it goes on to use DNS and is successful. This happens even if I run the tool on the DHCP server itself...

(in reply to jmercer54)

Post #: 28

RE: Firewall Client and Proxy Config confusion! - 8.Dec.2005 5:07:08 PM

LLigetfa

Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline

quote:

This happens even if I run the tool on the DHCP server itself...

Well... think about that statement for more than a second.

DHCP option 252 ONLY works for DHCP clients. If the client does not get its IP from DHCP. it will not work. The DHCP server cannot possibly be a DHCP client.

_____________________________

The School of Hard Knocks is a mean teacher. She gives the exam before the lesson.

(in reply to jmercer54)

Post #: 29

RE: Firewall Client and Proxy Config confusion! - 8.Dec.2005 5:53:07 PM

jmercer54

Posts: 85
Joined: 25.Oct.2004
From: NY
Status: offline

ARGH!!!!

Doh.

Thank you.

(in reply to LLigetfa)

Post #: 30

RE: Firewall Client and Proxy Config confusion! - 9.Dec.2005 7:12:16 PM

jmercer54

Posts: 85
Joined: 25.Oct.2004
From: NY
Status: offline

Big thanks to LLigetfa and spouseele for all your help with my insanity... everything is working 100% correctly now, and I've even managed to use the security configuration tool to harden my ISA server... and my logs are all going to SQL Server on another system.

You guys deserve a big round of applause for helping out a newbie like me. :)

(in reply to jmercer54)

Post #: 31

RE: Firewall Client and Proxy Config confusion! - 9.Dec.2005 7:18:05 PM

LLigetfa

Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline

Seeing as I piss off more people than I help, it is good to hear.

Thanks

_____________________________

The School of Hard Knocks is a mean teacher. She gives the exam before the lesson.

(in reply to jmercer54)

Post #: 32